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DETAILED ACTION 

1 . Amendment A, received on 22 July 2010, has been entered into record. In this 
amendment, claims 1,5, 10, 11, 15, and 20 have been amended, claims 2-4, 1 2-1 4, 22, 
and 23 have been canceled, and claim 29 has been added. 

2. Claims 1,5-11, 15-21, 24, and 29 are presented for examination. 

Response to Arguments 

3. With regards to the objections to the claims and drawings, the applicant has 
submitted amendments, and the examiner hereby withdraws the objections. 

4. With regards to the rejection of claims 11-15 under 35 USC 1 1 2, second 
paragraph, the applicant has submitted amendments, and the examiner hereby 
withdraws the rejection. 

5. Applicant's arguments filed 22 July 2010 have been fully considered but they are 
not persuasive. 

As to claim 1 , it is argued by the applicant that Ginter fails to teach the claimed 
applying test because the user device applies the at least one received usage right that 
was communicated from the recipient device to the user device. The examiner 
respectfully disagrees. It is noted that the steps listed in claim 1 are not interpreted as 
being necessarily operated in the particular order listed; therefore, the "received usage 
right" may be received from anywhere at any time. Ginter discloses that the rights may 
pass through a chain of distributers and users (col. 6, lines 17-22) and are therefore 
considered to have been received. 
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It is noted that the applicant has argued that three time intervals: before the 
expiry of the temporal restriction, until the expiry of the temporal restriction, and when 
the temporal restriction expires. It is again noted that the steps listed in claim 1 are not 
interpreted as being necessarily operated in the particular order listed. Further, the 
examiner has interpreted "before the expiry of the temporal restriction" and "until the 
expiry of the temporal restriction" as time periods prior to the expiration date, therefore 
representing the same period of time. 

Further, it is argued by the applicant that Ginter fails to disclose where a user 
device follows one or more usage rights and defines at least one usage right for a 
recipient which then generates at least one received usage right and communicates the 
at least one received usage right back to the user device which applies the at least one 
received usage right. The examiner respectfully disagrees. It is again noted that the 
steps listed in claim 1 are not interpreted as being necessarily operated in the particular 
order listed. It is further noted that the phrase "until the expiry of the temporal 
restriction" has been interpreted as being any time prior to expiration. Therefore, Ginter 
discloses that each right has an expiration date/time specifying the expiration date for 
the rights record (col. 152, lines 45-54) and that access rights are selected as a subset 
of rights for use in the corresponding VDE object (col. 156, lines 18-26). 

Specification 

6. The disclosure is objected to because it contains an embedded hyperlink and/or 
other form of browser-executable code (see page 1 , line 26 of the applicant's 
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specification). Applicant is required to delete the embedded hyperlink and/or other form 
of browser-executable code. See MPEP § 608.01 . 



Claim Rejections - 35 USC §112 

7. The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

8. Claims 1, 5-11, 15-21 , 24, and 29 are rejected under 35 U.S.C. 112, second 
paragraph, as being indefinite for failing to particularly point out and distinctly claim the 
subject matter which applicant regards as the invention. 

Claims 1,10, 20, and 29 are rejected under 35 U.S.C. 112, second paragraph, 
as being incomplete for omitting essential steps, such omission amounting to a gap 
between the steps. See MPEP § 2172.01 . The omitted steps are: description of how 
the protected content is encrypted prior to decryption, description of handshaking 
process which provides for encryption key associated with recipient device. 

Dependent claim(s) 5-9,11,15-19,21, and 24 do not appear to cure the 
deficiencies of the independent claims, and are therefore also rejected under 35 U.S.C. 
112, second paragraph, as being incomplete for omitting essential steps. 



Claim Rejections - 35 USC § 103 

9. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 
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(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

10. Claims 1,5-11, 15-21, 24, and 29 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Ginter et al. (US Patent 5,917,912 and Ginter hereinafter) in view of 
Inoue et al. (US 2003/0005135 A1 and Inoue hereinafter). 

As to claims 1 and 29, Ginter discloses a system and method for secure transaction 
management and electronic rights protection, the system and method having: 

obtaining the content at the user device from the protected content 
in accordance with the one or more first usage rights by decrypting the 
protected content by a first content encryption key in a first secure 
environment of the user device and by accessing the decrypted content in 
the first secure environment (col. 9, lines 1 9-24; col. 1 7, lines 42-51 ; col. 21 , 
lines 62-67; col. 22, lines 1-12), 

defining at least one usage right at the user device, the at least one 
defined usage right specifying one or more usage restrictions and/or one 
or more usage permissions of the content at a recipient device and the at 
least one defined usage right comprising a temporal restriction (col. 152, 
lines 45-52; col. 156, lines 18-26), 

verifying that the at least one defined usage right is a subset of the 
one or more first usage rights (col. 156, lines 18-26), 
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generating at the user device integrity protection information for the 
at least one defined usage right (col. 215, lines 43-51; col. 216, lines 6-8), 
encrypting the content with a content encryption key (col. 215, lines 

2-5), 

encrypting the content encryption key with a key encryption key 
associated with the recipient device and/or an operator of the recipient 
device (col. 128, lines 61-67; col. 129, lines 1-2), 

communicating the encrypted content, the at least one defined usage 
right, the encrypted content encryption key, and the integrity protection 
information to the recipient device (col. 126, lines 48-56), 

restricting the one or more first usage rights in consequence of the 
definition and/or the communication of the at least one defined usage right 
to the recipient device (col. 67, lines 25-29), 

verifying at the recipient device the integrity of the at least one 
defined usage right based on the integrity protection information (col. 215, 
lines 43-51,60-63), 

decrypting at the recipient device the encrypted content encryption 
key with a decryption key corresponding to the key encryption key (col. 
210, lines 18-22), 

decrypting the encrypted content with the content encryption key in 
a secure environment of the recipient device (col. 210, lines 22-25), 
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applying the at least one defined usage right to the content in the 
secure environment (col. 53, lines 45-63), 

using the content at the recipient device according to the applied at 
least one usage right (col. 53, lines 45-63); 

generating by the recipient device at least one received usage right 
that is a subset of the at least one defined usage right (col. 156, lines 18-26), 

applying the at least one received usage right at the user device until 
the expiry of the temporal restriction (col. 152, lines 45-54). 
Ginter fails to specifically disclose: 

restricting or blocking or deleting the at least one defined usage 
right at the recipient device before the expiry of the temporal restriction, 

communicating an indication of the restricting or blocking or 
deleting to the user device, the indication comprising the at least one 
received usage right, without returning the encrypted content to the user 
device; 

abolishing the restriction of the one or more first usage rights when 
the temporal restriction expires. 

Nonetheless, these features are well known in the art and would have been an obvious 
modification of the teachings disclosed by Ginter, as taught by Inoue. 
Inoue discloses a system and method for license management and usage restriction, 
the system and method having: 
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restricting or blocking or deleting the at least one defined usage 
right at the recipient device before the expiry of the temporal restriction 

(0113, lines 5-10), 

communicating an indication of the restricting or blocking or 

deleting to the user device, the indication comprising the at least one 

received usage right, without returning the encrypted content to the user 

device (0170, lines 15-21); 

abolishing the restriction of the one or more first usage rights when 

the temporal restriction expires (0100, lines 1-10; 0124, lines 1-5, 14-19). 
Given the teaching of Inoue, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Ginter with the teachings of Inoue by abolishing a restriction when it 
expires. Inoue recites motivation by disclosing that temporarily imposing a restriction on 
a user and lifting the restriction at the expiration of a time period allows for a parent to 
restrict a child's usage during a particular time, for example, before exams (0100, lines 
1-10). It is obvious that the teachings of Inoue would have improved the teachings of 
Ginter by temporarily restricting a user and abolishing the restriction after a certain time 
in order to allow a parent to restrict a child's usage of content without completely 
blocking it in order to allow for dynamic usage restriction implementation. 

As to claim 10, Ginter discloses: 
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at least a transmission unit and a processing unit and further a 
receiving unit, wherein protected content exists being usage restricted by 
one or more first usage rights specifying one or more usage restrictions 
and/or one or more usage permissions of the protected content at the user 
device (col. 9, lines 19-24; col. 17, lines 42-51; col. 62, lines 15-17, 31-34), 

the processing unit being adapted to obtain the content from the 
protected content in accordance with the one or more first usage rights by 
decrypting the protected content with a first content encryption key in a 
first secure environment of the user device and by accessing the decrypted 
content in the first secure environment (col. 9, lines 19-24; col. 17, lines 42- 
51; col. 21, lines 62-67; col. 22, lines 1-12), to define at least one usage right 
specifying one or more usage restrictions and/or one or more usage 
permissions of the content at the recipient device, the at least one defined 
usage right comprising a temporal restriction (col. 152, lines 45-52; col. 156, 
lines 18-26), to verify that the at least one defined usage right is a subset of 
the one or more first usage rights (col. 156, lines 18-26), to generate 
integrity protection information for the at least one defined usage right (col. 
215, lines 43-51 ; col. 216, lines 6-8)), to encrypt the content with a content 
encryption key (col. 215, lines 2-5), to encrypt the content encryption key 
with a key encryption key associated with the recipient device and/or an 
operator of the recipient device (col. 128, lines 61-67; col. 129, lines 1-2), the 
transmission unit being adapted to send the encrypted content, the at least 
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one defined usage right, the encrypted content encryption key, and the 
integrity protection information to the recipient device (col. 126, lines 48-56), 
and the processing unit being adapted to restrict the one or more first 
usage rights in consequence of the definition and/or the communication of 
the at least one defined usage right to the recipient device (col. 67, lines 25- 
29); 

wherein the indication comprises at least one received usage right 
that is a subset of the at least one defined usage right (col. 156, lines 18-26), 

the processing unit is adapted to apply the at least one received 
usage right until the expiry of the temporal restriction (col. 152, lines 45-54). 
Ginter fails to specifically disclose: 

the receiving unit is adapted to receive an indication of a restricting 
or a blocking or a deleting of the at least one defined usage rights at the 
recipient device before the expiry of the temporal restriction, 

to abolish the restriction of the one or more first usage rights the 
when temporal restriction expires. 
Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Ginter, as taught by Inoue. 
Inoue discloses: 

the receiving unit is adapted to receive an indication of a restricting 
or a blocking or a deleting of the at least one defined usage rights at the 
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recipient device before the expiry of the temporal restriction (01 13, lines 5- 

10; 0170, lines 15-21), 

to abolish the restriction of the one or more first usage rights the 

when temporal restriction expires (0100, lines 1-10; 0124, lines 1-5, 14-19). 
Given the teaching of Inoue, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Ginter with the teachings of Inoue by abolishing the restriction upon 
expiration. Please refer to the motivation recited above with respect to claims 1 and 29 
as to why it is obvious to apply the teachings of Inoue to the teachings of Ginter. 

As to claims 5 and 15, Ginter discloses: 

recognizing by the user device that the at least one received usage 
right relates to the at least one defined usage right (col. 55, lines 66-67). 
Ginter fails to specifically disclose: 

using the content at the user device according to the at least one 
first usage right even within the time upon the expiration of the temporal 
restriction. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Ginter, as taught by Inoue. 
Inoue discloses: 
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using the content at the user device according to the at least one 
first usage right even within the time upon the expiration of the temporal 
restriction (0100, lines 1-10; 0124, lines 1-5, 14-19). 
Given the teaching of Inoue, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Ginter with the teachings of Inoue by accessing the data after 
expiration of a restriction at a user device. Please refer to the motivation recites above 
with respect to claim 1 as to why it is obvious to apply the teachings of Inoue to the 
teachings of Ginter. 

As to claims 6 and 1 6, Ginter discloses: 

wherein the step of communicating the at least one defined usage 
right to the recipient device is executed by communicating the at least one 
defined usage right from the user device to a rights server (col. 55, lines 39- 
43), 

associating by the rights server the at least one defined usage right 
with authorization information indicating a rights issuer authorization for 
the at least one defined usage right to the recipient device (col. 55, lines 45- 
51), 

communicating the at least one defined usage right and the 
authorization information from the rights server to the recipient device, and 
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the recipient device verifies the rights issuer authorization based on the 
received authorization information (col. 14, lines 35-39; col. 55, lines 52-56). 

As to claims 7 and 17, Ginter discloses: 

communicating to a charging server an indication about the 
communication of the at least one defined usage right (col. 55, lines 57-61). 

As to claims 8 and 1 8, Ginter discloses: 

wherein an input unit of the user device D receives at least one 
instruction from a user for defining the at least one usage right (col. 16, 
lines 17-20; col. 60, lines 31-36). 

As to claims 9 and 19, Ginter discloses: 

defining at least one further usage right for at least one further 
recipient device for controlling the usage of the content at the at least one 
further device (col. 16, lines 14-20). 

As to claim 1 1 , Ginter discloses: 

the user device being adapted to load the protected content via a 
receiving unit and to store the protected content at a storage and/or to 
store pre-installed protected content at the storage (col. 58, lines 57-62; col. 
62, lines 64-65). 
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As to claim 20, Ginter discloses: 

at least a receiving unit and processing unit and further a 
transmission unit, wherein the receiving unit is adapted to receive the 
content being encrypted by a content encryption key, at least one defined 
usage right specifying one or more usage restrictions and/or usage 
permissions of the content and the at least one defined usage right 
comprising a temporal restriction, a content encryption key being 
encrypted by a key encryption key associated with the recipient device 
and/or an operator of the recipient device, and integrity protection 
information for the at least one defined usage right (col. 9, lines 19-24; col. 
17, lines 42-51; col. 21, lines 62-67; col. 22, lines 1-12; col. 62, lines 15-17, 31- 
34), 

the processing unit is adapted to verify the integrity of the at least 
one usage right based on the integrity protection information (col. 215, lines 
43-51 , 60-63), to decrypt the encrypted content encryption key with a 
decryption key corresponding to the key encryption key (col. 210, lines 18- 
22), to decrypt the encrypted content with the content encryption key in a 
secure environment (col. 210, lines 22-25), to apply the at least one defined 
usage right to the content in the secure environment (col. 53, lines 45-63), 
and to use the content according to the applied at least one defined usage 
right (col. 53, lines 45-63), to generate at least one received usage right that 
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is a subset of the at least one defined usage right for the indication (col. 

156, lines 18-26). 
Ginter fails to specifically disclose: 

to restrict or block or delete the at least one defined usage right 

before the temporal restriction expires, 

the transmission unit is adapted to send the indication comprising 

the at least one received usage right to the user device. 
Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Ginter, as taught by Inoue. 
Inoue discloses: 

to restrict or block or delete the at least one defined usage right 
before the temporal restriction expires (0113, lines 5-10), 

the transmission unit is adapted to send the indication comprising 
the at least one received usage right to the user device (0170, lines 15-21). 
Given the teaching of Inoue, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Ginter with the teachings of Inoue by restricting a right before 
expiration. Please refer to the motivation recited above with respect to claims 1 and 29 
as to why it is obvious to apply the teachings of Inoue to the teachings of Ginter. 



As to claim 21 , Ginter discloses: 
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wherein the processing unit is adapted to generate an alert if the 
integrity of the at least one defined usage right is violated and to initiate an 
indication of the alert at an output unit (col. 237, lines 33-37). 



As to claim 24, Ginter discloses: 

wherein the receiving unit is adapted to receive the at least one 
defined usage right and associated authorization information indicating a 
rights issuer authorization from a rights server and the processing unit is 
adapted to verify the rights issuer authorization based on the received 
authorization information (col. 14, lines 35-39; col. 55, lines 45-56). 



Prior Art of Record 

1 1 . The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

a. Foster et al. (US Patent 6,378,068 B1 ) discloses a system and method for 
suspending/resuming protected mode. 

b. Ruzyski et al. (US 2006/024271 3 A1 ) discloses a system and method for 
increasing and decreasing rights. 

c. Wood et al. (US 2004/0210771 A1 ) discloses a system and method for 
providing credential level change without loss of session continuity. 
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Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Sarah Su whose telephone number is (571) 270-3835. 
The examiner can normally be reached on Monday through Friday 7:30AM-5:00PM 
EST.. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, William Korzuch can be reached on (571) 272-7589. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Syed Zia/ /Sarah Su/ 

Primary Examiner, Art Unit 2431 Examiner, Art Unit 2431 



